
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e32302e302f32322d3232203d3e2034313334.roa
File: 3132312e34362e32302e302f32322d3232203d3e2034313334.roa (raw, json)
Hash identifier: da87XZSPWdiQh1zOUDAQwYx3SwwSMa4WecoY84Z4Cac=
Subject key identifier: 9A:B6:02:15:04:F0:99:B7:37:1B:2D:4B:5E:9E:ED:40:C4:38:E8:A8
Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial: 144F5D9E40C0147A8C2142295E866017CC5CBADD
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e32302e302f32322d3232203d3e2034313334.roa
Signing time: Mon 20 Apr 2026 06:29:06 +0000
ROA not before: Mon 20 Apr 2026 06:24:06 +0000
ROA not after: Mon 19 Apr 2027 06:29:06 +0000
asID: 4134
IP address blocks: 121.46.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 06:27:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:4f:5d:9e:40:c0:14:7a:8c:21:42:29:5e:86:60:17:cc:5c:ba:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Validity
Not Before: Apr 20 06:24:06 2026 GMT
Not After : Apr 19 06:29:06 2027 GMT
Subject: CN=9AB6021504F099B7371B2D4B5E9EED40C438E8A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a2:dd:0d:08:02:bc:19:6b:ce:c0:bc:e9:cd:
17:8e:c1:e1:70:12:29:a9:30:38:d1:9f:28:ce:65:
b1:03:24:fd:8b:f7:ba:1c:b8:51:2c:97:1a:c3:11:
78:de:92:72:82:57:cf:e7:59:31:5b:37:e7:54:42:
11:9c:cd:f3:6f:d1:b5:ff:a1:df:db:c4:41:d9:53:
6a:08:c0:d2:fc:e0:21:57:9c:f0:7b:05:10:47:72:
62:55:72:db:af:1d:26:6d:98:81:7a:2f:a9:f6:ef:
61:2d:ed:9b:5b:1a:72:6a:60:51:ea:7a:76:e6:3c:
fe:30:57:69:33:c1:85:04:c8:5c:18:39:71:ab:75:
02:97:8a:4d:f9:bc:ce:89:50:d5:20:ef:a7:00:13:
59:f7:f5:c4:83:c0:4b:e8:58:cb:a5:5f:e3:6e:03:
c3:c5:7a:42:6b:44:e8:a9:65:fd:50:3c:f8:14:22:
ea:99:35:94:99:b4:45:de:7c:05:8c:bf:8e:87:dd:
87:70:44:70:4e:12:e9:88:50:78:8a:22:ef:96:e2:
8c:8e:31:4e:a2:c6:cb:94:b5:a5:b6:ae:bd:36:a8:
81:76:1d:76:fb:5d:9a:0b:ef:a9:31:52:26:50:b9:
c0:55:27:4b:bf:81:5f:7c:5a:de:d6:16:ea:62:a3:
69:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B6:02:15:04:F0:99:B7:37:1B:2D:4B:5E:9E:ED:40:C4:38:E8:A8
X509v3 Authority Key Identifier:
keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e32302e302f32322d3232203d3e2034313334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.20.0/22
Signature Algorithm: sha256WithRSAEncryption
38:fb:72:ff:5d:50:be:7e:16:ce:cd:57:71:36:c0:65:a3:1c:
ef:7b:c9:ee:e9:ac:7e:ef:f4:48:04:ee:71:ba:95:39:4f:86:
a4:ea:6b:45:22:34:83:b0:a5:44:7f:fd:e9:48:0e:e5:9e:e7:
b4:aa:62:07:0b:02:5e:14:7d:3c:f7:bd:71:05:10:82:a1:2f:
20:58:d5:85:72:9b:47:a2:8f:1b:63:59:ae:a7:31:ce:76:97:
f1:68:03:87:86:f1:ae:cc:3f:4a:65:0b:47:b0:c8:97:16:9e:
35:4f:b8:92:8c:c4:1c:7e:0f:1e:0f:73:b7:2a:18:32:6d:51:
28:4d:e3:b3:c8:21:52:1b:29:80:f3:d9:b0:70:22:e8:5f:c2:
0d:ce:98:df:87:e2:d9:c1:ca:79:d9:84:36:2f:13:ab:bc:d2:
62:d1:2f:fc:79:a1:e7:b3:08:df:b2:9c:3e:4d:e7:b0:a5:52:
a3:5e:49:b2:2e:be:a5:19:be:1d:6f:1e:ac:20:a0:f1:33:4f:
6f:cc:e9:04:71:0c:15:09:d6:cb:35:7b:0a:c5:25:83:13:b2:
91:18:ba:21:91:8b:07:16:73:db:d2:5b:93:4d:f7:fd:da:ef:
81:af:54:8b:aa:c3:a3:59:fb:a5:c1:60:69:9d:f3:bb:09:69:
a1:c9:f9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 13:50:42 2026 by rpki-client